Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“A disaster since the update.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
3fd69c3f84a1758476df2764aaab9018e12e8131ce2d15a6c88af4c3f36bb31e
Signature (Ed25519, base64)
L4TdSuMqCaBeI9wOsnCYmEf4VZZlmy4jrypUYuf6UNDpNkXM/llmL6uafk1Yh2/NFCgwTtZHn2flfvz4xSOQDQ==
Merkle root
80de158564b7616572ca0c0059561f6ec90cd5bce49a388e61df989f3f6f2a86
Merkle path
["3fdf5d3725f02327e796a0c8cd19a077a059d9c96d7ed054c725ae7f9df396cf","6a6510d248ffe719bff678b8f7ecbc8370e57324a67c74de3e727771af64a282","8ccf0b3dd9975c458f0275974e735e5f849c3c4dc5e33ef550e7798e76279eab","54addadc5a3f7aa0871276c4e9106409d482a84df82779eb77bff479a5a63929","ef443063572b6c6cd4fb6473be4c0105db2bc3ceceecf2beadbd1bbc6c1ed7f7","023e1a2da3bf4fa991d45c0f353b43165bdd38015a39ee0eb1b386ba4acc1c7e","25a54301bc7354ec0e1945cd708ce935e3f3a20ba38ee01aa9037a5e6edf01d4","e280f83325bec48e0deed73d19ca55df9db87b0c685455f062d3495d06814f84","07b7e8ba3797773c320ecd7b6b2f3065b6e30d6f1ffbd369cd9e884de45c0997","440aff6a56bbe3206e510b0140c53c9c7e466b15cc20283dcdd8374bc372db94","85b2ed1f1f79d52d42349046a5c7b50ff11b40f806cde31b0f7340ab8b63675c","ddd0e4c00dc720df062af8c3ada3e0e601d08b0e46b012f61ab57fc13eea2552","4ed704155a8c329bf8c2403f20a1ab4e61e02502a677ade2c54537fcf0c0aaf9","f23007ee336c6a9903bdec729de4dd7e96694a7e2f1071f195563e9aff8dd97f","68889fd35b89925b8d265e65260618471cd9c2f5458718fde3d6cb3829d8f00f"]
Anchored
2026-08-19
Public log entry
search.sigstore.dev, log index 2513802575 · entry 108e9186e8c5677a9216…
Expected log hash
5899b5d0ea18fa3c879147333708054c2e3cd77662f2b6f633aa3b5d5512bbe5 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787121142818","kind":"published-quote","locale":"en","page":"product:sevdesk/buchhaltungssoftware/en","quote":"A disaster since the update.","rating":1,"review_date":"2025-07-05","source":"Apple App Store","source_url":"https://apps.apple.com/de/app/id731738076?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (80de158564b7…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.